Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    31-08-2024 20:16

General

  • Target

    xmrig_5.4

  • Size

    2.7MB

  • MD5

    c91e51ae08df78760d02e95195cd9470

  • SHA1

    a782bebb45d894c1d77b58e650d00d4613acb790

  • SHA256

    5781efda95c0724200f82cc53c1eef201be2fce823c2706cde8f317f423a0c9f

  • SHA512

    5369071654acdf1a2cace7b1c60a6ea2e833894719c8ca16137e78d84fe35059eb9a46b7f7133ad3d26d58af74c0d08ff686bb7ebf87bd70c17831fe494bb4c7

  • SSDEEP

    49152:34klRYQdFns/7GjX5VW/////j///P/P/SHVHVHwGjHGjNJ515yQ9LdzOg4yro2/k:3zlldFOGjX5VW/////j///P/P/SHVHV5

Score
6/10

Malware Config

Signatures

  • Checks hardware identifiers (DMI) 1 TTPs 4 IoCs

    Checks DMI information which indicate if the system is a virtual machine.

  • Reads hardware information 1 TTPs 14 IoCs

    Accesses system info like serial numbers, manufacturer names etc.

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 1 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 51 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 5 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/xmrig_5.4
    /tmp/xmrig_5.4
    1⤵
    • Checks hardware identifiers (DMI)
    • Reads hardware information
    • Checks CPU configuration
    • Reads CPU attributes
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1601
    • /bin/sh
      sh -c "/sbin/modprobe msr > /dev/null 2>&1"
      2⤵
        PID:1614
        • /sbin/modprobe
          /sbin/modprobe msr
          3⤵
          • Enumerates kernel/hardware configuration
          • Reads runtime system information
          PID:1615

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads